JRun Web Server (JWS) GET Request Traversal Arbitrary File Access

This host is running the Allaire JRun web server. Versions 2.3.3, 3.0, and 3.1 are vulnerable to a directory traversal attack. This allows a potential intruder to view the contents of any file on the system. %NASLMINLEVEL 70300 This script was written by H D Moore Script audit and contributions...

Cisco 6400 NRP2 Unauthenticated Telnet Access (CSCdt65960)

The Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 module allows Telnet access when no password has been set. The correct response is to disallow any remote access to the module until the password has been set. This vulnerability may result in users gaining unintended access to secure...

IBM Lotus Domino Crafted .nsf Request Authentication Bypass

By creating a specially crafted URL, the authentication mechanism of the Domino database can be circumvented. These URLs should look like : http://host.com/.ntf.nsf/ in which has a certain length. %NASLMINLEVEL 70300 This script was written by Davy Van De Moere - CISSP [email protected] See the...

CVE-2001-1242

The CVE-2001-1242 entry concerns a directory traversal in Un-CGI 1.9 and earlier, where an attacker can trigger arbitrary code execution by supplying a .. (dot dot) in an HTML form. The vulnerability arises in the way path components are processed, enabling remote exploitation. Affected software:...

CVE-2001-1243

CVE-2001-1243 affects Microsoft IIS 4.0/5.0 with asp.dll Scripting.FileSystemObject. The vulnerability allows local or remote attackers to cause a denial of service (crash) by: (1) crafting an ASP program using Scripting.FileSystemObject to open a file using an MS-DOS device name, or (2) injectin...

CVE-2001-1250

CVE-2001-1250 affects vWebServer 1.2.0, where remote attackers can cause a denial of service (hang) by sending a small number of long URL requests. The root cause is suspected buffer overflow in URL handling. Public details consistently describe a DoS via excessively long URLs; no explicit exploi...

CVE-2001-1253

CVE-2001-1253 affects Alexis 2.0/2.1 in COM2001 InternetPBX, where voicemail passwords are stored in plain text in the com2001.ini file. This plaintext storage could allow local users to impersonate other users and place long-distance calls. The available documents do not provide exploitation det...

CVE-2001-1256

CVE-2001-1256 concerns HP-UX 11.11, 11.04 and 11.00 where the kmmodreg program creates two temporary files in /tmp (namely /tmp/.kmmodreg_lock and /tmp/kmpath.tmp) with insecure handling. A local attacker can exploit a symlink race to overwrite arbitrary world-writeable files because the files ar...

CVE-2001-1265

CVE-2001-1265 concerns a directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21. The issue allows remote attackers to perform unauthorized operations on arbitrary files using a .. (dot dot) path traversal technique. The CVSS vector from NVD indicates a network-accessible, low-c...

CVE-2001-1270

CVE-2001-1270 affects the PKZip console tool (pkzipc) 4.00 and earlier. The vulnerability is a directory traversal during archive extraction when using the -rec option, allowing an attacker to overwrite arbitrary files via a .. path in archived filenames. The available documents confirm the affec...

CVE-2001-1285

The CVE-2001-1285 entry describes a directory traversal vulnerability in Ipswitch IMail 7.04 and earlier, exploited via a .. (dot dot) in the mbx parameter to readmail.cgi. Affected component: readmail.cgi in Ipswitch IMail (versions ≤ 7.04). Root cause: improper validation of the mbx parameter a...

CVE-2001-1289

CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...

CVE-2001-1294

CVE-2001-1294 describes a buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier, allowing remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password. The connected records confirm the affected software and the impact (availability). Root ca...

CVE-2001-1305

CVE-2001-1305 affects ICQ 2001a Alpha and earlier. A remote attacker can cause an ICQ user’s contact list to automatically include arbitrary UINs by visiting a web page whose Content-Type is set to application/x-icq, which IE processes. The connected documents consistently describe ICQ as vulnera...

CVE-2001-1309

CVE-2001-1309 concerns IBM SecureWay Directory/3.2.1 with buffer overflow vulnerabilities in LDAP processing. The CERT/IBM-disclosed issues indicate remote attackers could crash affected servers (DoS) and potentially execute arbitrary code, as demonstrated by PROTOS LDAPv3 test suites. Documented...

CVE-2001-1313

The CVE-2001-1313 entry refers to Lotus Domino R5 before R5.0.7a, where LDAP handling code vulnerabilities allow a remote attacker to crash the server and potentially execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite. T...

CVE-2001-1314

The CVE-2001-1314 issue affects Critical Path components InJoin Directory Server and LiveContent Directory. The root cause is a buffer overflow in the LDAP handling code, demonstrated by PROTOS LDAPv3 tests. Consequences documented include remote denial of service (crash) and potential arbitrary ...

CVE-2001-1316

The CVE-2001-1316 issue concerns Teamware Office Enterprise Directory’s LDAP server, where buffer overflow in LDAP handling code (triggered by malformed LDAP requests) can cause remote denial-of-service and may allow arbitrary code execution, as demonstrated by the PROTOS LDAPv3 test suite. Docum...

CVE-2001-1321

CVE-2001-1321 affects Oracle Internet Directory Server 2.1.1.x and 3.0.1. The issue permits remote attackers to crash the service and potentially execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. The root cause is in the...

CVE-2001-1337

The CVE-2001-1337 entry concerns Beck IPC GmbH IPC@CHIP Embedded-Webserver. Reported impact is a remote denial of service triggered by a long HTTP request. The available information does not specify affected versions, exact vulnerable component or root cause details, nor any published exploitable...